Fortinet NSE5_FAZ-7.2 Online Practice Questions and Exam Preparation

Fortinet NSE5_FAZ-7.2 Online Questions & Answers

• Question 101:

  Refer to the exhibit.

  

  Which image corresponds to the packet capture shown in the exhibit?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 102:

  Refer to the exhibit.

  

  What is the purpose of using the Chart Builder feature on FortiAnalyzer?

  A. To add a new chart under FortiView to be used in new reports
  B. To build a dataset and chart automatically, based on the filtered search results
  C. To add charts directly to generate reports in the current ADOM
  D. To build a chart automatically based on the top 100 log entries
  C. To add charts directly to generate reports in the current ADOM

• Question 103:

  Refer to the exhibit.

  

  The image displays the configuration of a FortiAnalyzer the administrator wants to join to an existing HA cluster. What can you conclude from the configuration displayed?

  A. This FortiAnalyzer will join to the existing HA cluster as the primary.
  B. This FortiAnalyzer is configured to receive logs in its port1.
  C. This FortiAnalyzer will trigger a failover after losing communication with its peers for 10 seconds.
  D. After joining to the cluster, this FortiAnalyzer will keep an updated log database.
  B. This FortiAnalyzer is configured to receive logs in its port1.

• Question 104:

  If a hard disk fails on a FortiAnalyzer that supports software RAID, what should you do to bring the FortiAnalyzer back to functioning normally, without losing data?

  A. Hot swap the disk
  B. Replace the disk and rebuild the RAID manually
  C. Take no action if the RAID level supports a failed disk
  D. Shut down FortiAnalyzer and replace the disk
  D. Shut down FortiAnalyzer and replace the disk

• Question 105:

  You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?

  A. Shut down FortiAnalyzer and then replace the disk
  B. Downgrade your RAID level, replace the disk, and then upgrade your RAID level
  C. Clear all RAID alarms and replace the disk while FortiAnalyzer is still running
  D. Perform a hot swap
  A. Shut down FortiAnalyzer and then replace the disk

• Question 106:

  Refer to the exhibit.

  

  What does the data point at 14:55 tell you?

  A. The received rate is almost at its maximum for this device
  B. The sqlplugind daemon is behind in log indexing by two logs
  C. Logs are being dropped
  D. Raw logs are reaching FortiAnalyzer faster than they can be indexed
  D. Raw logs are reaching FortiAnalyzer faster than they can be indexed

• Question 107:

  What is the purpose of using prefilters when configuring event handlers?

  A. They limit which logs are checked for matches by the other filters.
  B. They can filter the logs before they are processed by FortiAnalyzer
  C. They download new filters to be used in event handlers.
  D. They are common filters applied simultaneously to all event handlers.
  C. They download new filters to be used in event handlers.

• Question 108:

  FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days. What is the most likely problem?

  A. Quota enforcement is acting on analytical data before a report is complete
  B. Logs are rolling before the report is run
  C. CPU resources are too high
  D. Disk utilization for archive logs is set for 15 days
  B. Logs are rolling before the report is run

• Question 109:

  Which two of the following must you configure on FortiAnalyzer to email a FortiAnalyzer report externally? (Choose two.)

  A. Mail server
  B. Output profile
  C. SFTP server
  D. Report scheduling
  A. Mail server
  B. Output profile

• Question 110:

  On the RAID management page, the disk status is listed asInitializing.

  What does the statusInitializingindicate about what the FortiAnalyzer is currently doing?

  A. FortiAnalyzer is ensuring that the parity data of a redundant drive is valid
  B. FortiAnalyzer is writing data to a newly added hard drive to restore it to an optimal state
  C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant
  D. FortiAnalyzer is functioning normally
  C. FortiAnalyzer is writing to all of its hard drives to make the array fault tolerant